Update dependency marked to v18.1.0

[oxide-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
marked (source)	18.0.9 → 18.1.0

---

Release Notes

markedjs/marked (marked)

v18.1.0

Compare Source

Bug Fixes

• avoid cubic backtracking on unicode whitespace in a link destination (#​4106) (0d20220)
• load CLI configs with top-level await (#​4100) (c61543e)
• reject unbalanced parentheses in link destinations (#​4107) (3363c99)

Features

• add linkParenPossible to lexer state to fail fast for link token generation (#​4070) (4ee44f7)

v18.0.14

Compare Source

Bug Fixes

• allow indented lines in setext heading text (#​4095) (7d05530)
• decode numeric character references in text (#​4076) (cead8de)
• keep text after empty nested blockquote (#​4101) (1b89557), closes #​4098
• preserve internal tabs in list item content (#​4086) (e136da7)
• strip whitespace when normalizing link reference labels (#​4091) (c7ee43a)
• support GFM protocol autolinks (#​4067) (7f7a496)

v18.0.13

Compare Source

Bug Fixes

• allow tabs in the thematic break that ends a list item (#​4087) (afbb27c)
• avoid O(n^2) scanning in reflinkSearch (#​4090) (c6a25bb)
• case fold reference link labels (#​4077) (aed9336)
• drop the leading whitespace after a hard line break (#​4075) (123ce04)
• match html block start conditions when ending a list item (#​4072) (c2facac)
• respect raw tokens when closing link labels (#​4066) (ef394f7)
• strip a tab that follows spaces in an indented code block (#​4080) (dbb393d)

v18.0.12

Compare Source

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#​4084) (4417582)
• allow one more level of nested brackets in a link label (#​4064) (37b28d8)
• do not add a newline to an empty code block (#​4073) (23b1706)
• escape character references in autolink destinations (#​4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#​4063) (df57534)
• reject invalid characters in HTML tag names (#​4083) (300bb1d)
• remove up to the fence indentation from each content line (#​4074) (0244f08)

v18.0.11

Compare Source

Bug Fixes

• do not nest a link inside a link (#​4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#​4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#​4059) (b699db3)

v18.0.10

Compare Source

Bug Fixes

• keep the em/strong mask the same length as the source (#​4044) (681373c)
• parse EOF backtick fences after paragraphs (#​4039) (81bd750)
• place task checkboxes after list loose is finalized (#​4046) (b8cf7dc), closes #​4045

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "after 8pm,before 6am"
• Automerge
  • "after 8pm,before 6am"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
rfd-site	Ready	Preview	Oct 8, 2026 3:27am UTC